Lucene search

K
cveMitreCVE-2008-1138
HistoryMar 04, 2008 - 8:44 p.m.

CVE-2008-1138

2008-03-0420:44:00
CWE-119
mitre
web.nvd.nist.gov
24
cve-2008-1138
dlmfenc.sys
deslock+
denial of service
system crash
vulnerability
nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

21.8%

DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a certain ZERO_MEM DLMFENC_IOCTL request to \.\DLKPFSD_Device, aka the “ring0 link list zero” vulnerability.

Affected configurations

Nvd
Node
deslockdeslockRange3.2.6
VendorProductVersionCPE
deslockdeslock*cpe:2.3:a:deslock:deslock:*:*:*:*:*:*:*:*

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

21.8%

Related for CVE-2008-1138